claim-tokens[.]xyz

This domain, claim-tokens.xyz, is a fraudulent website designed to impersonate the legitimate OKX cryptocurrency platform. The site poses a significant risk of brand impersonation, potentially aiming to trick visitors into entering sensitive information such as login credentials, private keys, or seed phrases under the guise of an OKX-related service. Such phishing infrastructure is commonly used to execute crypto drainer attacks, where victims unknowingly authorize transactions that empty their wallets. The page title, 'Website claim-tokens.xyz is ready. The content is to be added,' indicates the site was in an early preparation stage, likely awaiting malicious payload deployment.

Technical analysis confirms this domain's malicious intent. VirusTotal reports 5 out of 95 security vendors flagging the domain, and it appears on two security blocklists, including PhishDestroy and Enkrypt. The domain was created on August 19, 2025, through registrar NameSilo, LLC, and resolves to IP address 45.9.148.106. Gridinsoft assigns a trust score of 0/100, reflecting extreme risk. The domain is currently offline, but its infrastructure remains a threat indicator for future campaigns. The unique seed 0ada27 helps track this specific instance across intelligence feeds.

If you visited claim-tokens.xyz, take immediate action: do not enter any personal information, passwords, or cryptocurrency wallet details. Run a full antivirus scan on your device to check for any downloaded payloads. Change passwords for any accounts where you may have reused credentials, especially if linked to OKX or other crypto services. Enable two-factor authentication on all financial accounts. Monitor your cryptocurrency wallets for unauthorized transactions and consider transferring funds to a new wallet if you interacted with the site. Report the domain to relevant threat intelligence platforms and your email provider to block future communications referencing this domain.